Privacy Policy

1. Who we are

This privacy policy describes how HoutaLik Management Systems ("HMS", "we", "us", "our") — published as com.houtalik.hms on the Google Play Store and Apple App Store — handles personal data when you use the app.

HMS is published by HoutaLik. The backend infrastructure that powers the app is operated by Karchedon on our behalf, hosted at db.karchedon.com.

2. Data we collect

The app collects only data needed to provide its core features. Specifically:

We do not collect: precise location, contact lists, SMS, browsing history, advertising identifiers, biometric data, or any data unrelated to running the shop-management features.

3. How we use it

• To authenticate you and keep you signed in across sessions.
• To process the photos you take and identify fish species so they appear in your catalog automatically.
• To convert your voice recordings into orders and store them in your order history.
• To synchronize your stock, orders, and notifications across your devices and with the backend.
• To send you in-app and push notifications about new orders, messages, and stock updates.
• To respond to support requests and bug reports you submit.
• To detect, prevent, and investigate fraud, abuse, or security incidents.
• To comply with legal obligations.

We do not use your data to train machine-learning models for third parties, do not sell your data, and do not share it with advertising networks.

4. Device permissions

The app requests the following permissions on your device:

You can revoke any of these permissions at any time in your device's system settings. The app may not function fully if a required permission is denied (for example, you cannot add a fish via photo without camera access).

5. Sharing and third parties

We share your data only with:

• Our infrastructure provider (Karchedon), who hosts the backend that stores your data on our behalf. Karchedon does not access your data for its own purposes.
• Apple and Google, when delivering push notifications and handling app distribution and crash diagnostics through their respective app store services.
• Authorities or law enforcement, where required by a valid legal request and to the minimum extent necessary.
• A successor entity, in the event of a merger, acquisition, or sale of assets — in which case we will notify you and ensure the same protections apply.

We do not share your data for marketing or advertising purposes.

6. Retention and deletion

• Account data is retained for as long as your account is active and for a reasonable period after deletion to comply with accounting and legal record-keeping obligations.
• Catalog photos and voice recordings are retained as long as the stock item or order they belong to is active. You can delete individual items at any time from within the app.
• Order history is retained for the period required by applicable commercial and tax law (typically up to 10 years in Tunisia and most jurisdictions).
• Diagnostics and logs are retained for up to 90 days, after which they are aggregated or deleted.

To request deletion of your account and all associated data, email privacy@houtalik.com. We will process your request within 30 days. Some data may be retained where we have a legal obligation to do so (e.g., transaction records for tax purposes).

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at privacy@houtalik.com. We will respond within 30 days. We may need to verify your identity before processing the request.

8. Security

We protect your data using industry-standard practices:

• All data is transmitted over HTTPS / TLS.
• Passwords are stored hashed, never in plain text.
• Backend access is restricted by authentication and role-based controls.
• We monitor for unauthorized access and apply security patches promptly.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authorities as required by law.

9. Children

HMS is a business tool intended for fishmongers and shop operators. It is not directed at children under the age of 16, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. International transfers

Our backend servers are operated by Karchedon and may be located outside your country of residence, including in jurisdictions with different data protection laws. We rely on appropriate safeguards (such as standard contractual clauses) when transferring data internationally.

11. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. For material changes, we will notify you in-app or by email before the change takes effect. Continued use of the app after a change constitutes acceptance of the updated policy.

12. Contact

If you have questions about this policy or how we handle your data:

• Email: privacy@houtalik.com
• Support: support@houtalik.com
• Website: hms.houtalik.com